CVE-2025-22013— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确保存主机FPSIMD/SVE/SME状态，可能导致QEMU崩溃或ptrace ABI变更。
影响版本矩阵 12
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | c4ab60a86c5ed7c0d727c6dc8cec352e16bc7f90< 5289ac43b69c61a49c75720921f2008005a31c43 |
affected |
d5f7d3833b534f9e43e548461dba1e60aa82f587< 04c50cc23a492c4d43fdaefc7c1ecc0ff6f7b82e |
affected | ||
93ae6b01bafee8fa385aa25ee7ebdb40057f6abe< 806d5c1e1d2e5502175a24bf70f251648d99c36a |
affected | ||
93ae6b01bafee8fa385aa25ee7ebdb40057f6abe< 79e140bba70bcacc5fe15bf8c0b958793fd7d56f |
affected | ||
93ae6b01bafee8fa385aa25ee7ebdb40057f6abe< 900b444be493b7f404898c785d6605b177a093d0 |
affected | ||
93ae6b01bafee8fa385aa25ee7ebdb40057f6abe< fbc7e61195e23f744814e78524b73b59faa54ab4 |
affected | ||
6.2 |
affected | ||
< 6.2 |
unaffected | ||
| … +4 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2025-22013 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
There are several problems with the way hyp code lazily saves the host's
FPSIMD/SVE state, including:
* Host SVE being discarded unexpectedly due to inconsistent
configuration of TIF_SVE and CPACR_ELx.ZEN. This has been seen to
result in QEMU crashes where SVE is used by memmove(), as reported by
Eric Auger:
https://issues.redhat.com/browse/RHEL-68997
* Host SVE state is discarded *after* modification by ptrace, which was an
unintentional ptrace ABI change introduced with lazy discarding of SVE state.
* The host FPMR value can be discarded when running a non-protected VM,
where FPMR support is not exposed to a VM, and that VM uses
FPSIMD/SVE. In these cases the hyp code does not save the host's FPMR
before unbinding the host's FPSIMD/SVE/SME state, leaving a stale
value in memory.
Avoid these by eagerly saving and "flushing" the host's FPSIMD/SVE/SME
state when loading a vCPU such that KVM does not need to save any of the
host's FPSIMD/SVE/SME state. For clarity, fpsimd_kvm_prepare() is
removed and the necessary call to fpsimd_save_and_flush_cpu_state() is
placed in kvm_arch_vcpu_load_fp(). As 'fpsimd_state' and 'fpmr_ptr'
should not be used, they are set to NULL; all uses of these will be
removed in subsequent patches.
Historical problems go back at least as far as v5.17, e.g. erroneous
assumptions about TIF_SVE being clear in commit:
8383741ab2e773a9 ("KVM: arm64: Get rid of host SVE tracking/saving")
... and so this eager save+flush probably needs to be backported to ALL
stable trees.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确保存主机FPSIMD/SVE/SME状态，可能导致QEMU崩溃或ptrace ABI变更。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2025-22013 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2025-22013 的情报信息
请登录查看更多情报信息。
CVE-2025-22013 补丁与修复 (3)
同批安全公告 · Linux · 2025-04-08 · 共 10 条
| CVE-2025-22012 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-22015 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-22017 | Linux kernel 安全漏洞 | |
| CVE-2025-22016 | Linux kernel 安全漏洞 | |
| CVE-2025-22014 | Linux kernel 安全漏洞 | |
| CVE-2025-22011 | Linux kernel 安全漏洞 | |
| CVE-2025-22010 | Linux kernel 安全漏洞 | |
| CVE-2025-22009 | Linux kernel 安全漏洞 | |
| CVE-2025-22008 | Linux kernel 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-22013
暂无评论